The Transmission Control Protocol.

Purpose – Retailers and suppliers are facing the challenge of reconfiguring systems to accommodate increasingly mobile customers expecting multichannel options supporting quick and secure digital payment. The purpose of this paper is to harness the learning from the implementation of self-checkout and combines it with available information relating to mobile scanning and mobile point-of-sale (MPOS). Design/methodology/approach – In review of the literature, the paper provides an overview of different modes of mobile payment systems, and a consideration of some of the benefits that they offer to retailers and their customers. The main focus, drawing upon telephone interviews with retail security professionals in Australia and New Zealand, is on anticipating and mitigating against the potential risks, vulnerabilities and impact on shrinkage. Findings – With the market being flooded with software and products, retailers are exposed to a compelling case for mobile payment, but it was found that they are not a...

/pdf/mobile-payment-technologies-in-retail-a-review-of-potential-1ozpkqf21x.pdf

Mobile payment technologies in retail: a review of potential benefits and risks

The world witnessed a rapid growth in the e-commerce in the recent years. Widespread use of mobile devices in the e-commerce has a role in this augmentation. Associated with growth of trading volume and the introduction of new devices, new products and solutions emerge and they diversify concerning online payments. Consumer attitudes and behaviors may change according to these developments. The purpose of this study is to investigate the factors effecting adoption of mobile payment systems by the consumer. 225 individuals were surveyed online through convenience sampling method. A research model was developed and proposed relationships were tested using structural equation modeling. The empirical findings point out that perceived trust, perceived mobility and attitudes positively affect the adoption of MPS; perceived usefulness and perceived ease of use have no effect on adoption of MPS. Furthermore perceived reputation positively related to perceived trust and finally environmental risk negatively related to perceived trust.

/pdf/factors-affecting-the-adoption-of-mobile-payment-systems-an-22pyiazcou.pdf

Factors Affecting the Adoption of Mobile Payment Systems: An Empirical Analysis

Mobile payment systems can be divided into five categories including mobile payment at the POS, mobile payment as the POS, mobile payment platform, independent mobile payment system, and direct carrier billing. Although mobile payment has gained its popularity in many regions due to its convenience, it also faces many threats and security challenges. In this paper, we present a mobile payment processing model and introduce each type of mobile payment systems. We summarize the security services desired in mobile payment systems and also the security mechanisms which are currently in place. We further identify and discuss three security threats, i.e., malware, SSL/TLS vulnerabilities, and data breaches, and four security challenges, i.e., malware detection, multi-factor authentication, data breach prevention, and fraud detection and prevention, in mobile payment systems.

Mobile payment security, threats, and challenges

In this paper, we introduce a secure mobile payment model suitable for macro transactions that compromise cost, simplicity, security, and performance of transaction, with minimum number of cryptography key usages, and less encryption/decryption operations compared to other models. This model can use symmetric and asymmetric cryptography without the need of trusted 3rd parties or even PKI complexity. It is based on SMS as a transport channel which provides the capability to send transactions to payer not to payee; as usually done in most current payment transaction models. The payer receives a secured SMS message (invoice) waiting his/her confirmation (yes/no). Each entity in the payment system payer/payee trusts only his/her bank respectively, so the transaction will always go through trusted nodes. The payer/payee can also use any bank payment instrument (credit card, debit card, or even current account) without revealing confidential data during the payment. This model can be applied on any payment application e.g. e-check, money transfer, e-commerce, and even normal EFTPOS transactions with leverage infrastructure supporting the above mentioned payment applications.

SecureSMSPay: Secure SMS Mobile Payment model

Mobile Payment Systems

In the last few years, Vehicular ad hoc Networks (VANETs) have attracted a lot of attention and have triggered the development of many new attractive applications. They have become a fundamental component of many intelligent transportation systems and VANETs are being used to improve road safety and enable a wide variety of value-added services. Nevertheless, VANET applications have stringent security requirements because they affect road traffic safety. Several security threats and different types of attacks against VANETs have emerged recently that attempt to compromise the security of such networks. These attacks can cause catastrophic results such as the loss of lives or the loss of revenue for those value-added services. Therefore, making VANETs secure has become a key objective for VANET designers. Since traditional security mechanisms are not always suitable to some unique features in VANETs (e.g., high mobility of nodes), industry and academia have been focusing on improving VANET security. We present threats and attacks that can be launched on VANETs and we identify the security solutions to mitigate them. We also highlight VANET security challenges that still need to be addressed to enable robust, scalable, cost-effective secure solutions for VANETs.

Security in vehicular ad hoc networks

Most of the security proposals in m-commerce scenarios have been based on a classical payment model, which basically establishes relationships across domains among customers and merchants by means of business and banking domains. Nevertheless, these security solutions are not sufficiently robust when new components intend to participate in the m-commerce process. From our research, we can identify three emerging factors that could subordinate the design of current and future m-commerce scenarios: enhanced payment cards with networking functionalities, a plethora of infrastructures with constrained connectivity and intermediary entities with multiparty payment functionalities. Consequently, this paper identifies the need for review of the model being used so far in order to guarantee security robustness, and proposes an extended payment model that, among other advantages, allows the study of more effective security solutions.

A new domain-based payment model for emerging mobile commerce scenarios

Many mobile payment models have been proposed by researchers in the last decade. This chapter classify them based on their specific features to enable readers to stay up-to-date with state-of-the-art mobile payment models. The core features used in our classification include: (i) micro-payments, (ii) cryptographic technique (asymmetric cryptographic and symmetric cryptographic), (iii) technology used such as short message service, biometric technology, Radio-Frequency IDentification (RFID) technology, Near Field Communication (NFC), 2-D barcode technology, and peer-to-peer technology, (iv) Session Initiation Protocol (SIP), communication restriction, (v) mobile agent technology, and (vi) wireless application protocol.

Architectures and Models for Mobile Payment Systems

Most of the secure electronic payment solutions that have been proposed in the last years are focused on the traditional payment model: one customer buys goods/services to one merchant, and a payment e- transaction is performed via a processor and banking institutions. However, nowadays, more versatile e- commerce scenarios could be considered with different constraints but with interesting challenges and advantages. On one hand, new customers habits and new connectivity solutions and technologies such as hotspots in public wireless LANs, enough band-width in 3G cellular networks, powerful smart-phones, embedded browsers, etc. are adapting the current market offers. On the other hand, new intermediate entities aim to participate in the purchase transaction by providing value-added and customized services to the different parties, with the corresponding benefits. An important assumption for our proposal is that this intermediary is an a priori untrustworthy entity for the customer. In this paper, we describe a new e-payment model with an intermediary that links one customer with multiple merchants. Additionally, this model considers merchants and intermediaries with Internet connectivity constraints; therefore our solution is based on a client-centric approach, i.e. only the client equipment has the capability of online communicating with the banking networks by means of a payment service provider. For that reason, our solution is focused on the protection of the end-to-end e-payment transactions that are transmitted through a powerful client handheld device.

Jesús Téllez

Papers

Mobile Payment Systems

Security in vehicular ad hoc networks

A new domain-based payment model for emerging mobile commerce scenarios

Architectures and Models for Mobile Payment Systems

Secure e-payment protocol with new involved entities